The system configuration is:
SEPM console on a SBS 2008 server; all workstations are Windows 7, most are 64-bit, but a few are 32-bit; just upgraded to Endpoint Protection v. 12.1.4. The problem has existed all the way back to version 12.1.0 and possibly earlier.
The server successfully downloads the new IPS definitions, but all of the workstations have very old definitions. Most of them show definitions from back in January 2014, one of them has defs from June 2014, when it was installed. The antivirus and Proactive Threat Protection definitions are fine; the only problem is with the IPS definitions. They are always months behind. I spent many hours on the phone with Symantec some time ago trying to troubleshoot this problem and finally gave up. I was hoping the latest upgrade to 12.1.4 MP1b would fix the problem, so I deployed the new version with the option to replace all previous settings, etc., but so far no such luck.
Does anyone have any experience with a similar situation and any ideas on how to fix this?